Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 255 / 698

MAC-Based Security
ExtremeWare XOS 11.3 Concepts Guide
255
In this way, the communication between client 1 and client 2 is controlled. If client 1 needs to
communicate with client 2 and has that IP address, client 1 sends out an ARP request to resolve the IP
address for client 2.
Guidelines for Enabling or Disabling Egress Flooding
The following guidelines apply to enabling and disabling egress flooding:
●
Egress flooding can be disabled on ports that are in a load-sharing group. If that is the situation, the
ports in the group take on the egress flooding state of the master port; each member port of the load-
sharing group has the same state as the master port.
●
FDB learning is independent of egress flooding; either can be enabled or disabled independently.
●
Disabling unicast (or all) egress flooding to a port also stops packets with unknown MAC addresses
to be flooded
to that port.
●
Disabling broadcast (or all) egress flooding to a port also stops broadcast packets to be flooded to
that port.
Disabling Egress Flooding on the BlackDiamond 8800 Family of Switches and the
Summit X450 Switch Only
You can enable or disable egress flooding for unicast, multicast, or broadcast MAC addresses, as well as
for all packets on the ports of the BlackDiamond 8800 family of switches (formerly known as Aspen) or
the Summit X450 switch.
Disabling multicasting egress flooding does not affect those packets within an IGMP membership group
at all; those packets are still forwarded out. If IGMP snooping is disabled, multicast packets with static
FDB entries are forwarded according to the FDB entry.
You enable egress flooding for these switches using the following command:
enable flooding [all_cast | broadcast | multicast | unicast] port [<port_list> | all]
To disable flooding for these switches, use the following command:
disable flooding [all_cast | broadcast | multicast | unicast] port [<port_list> | all]
Disabling Egress Flooding on the BlackDiamond 10K Switch Only
You must enable or disable egress flooding on all packets on the specified port or ports. You cannot
specify broadcast, unicast, or multicast packets; the egress flooding command applies to all packets.
Disabling multicasting egress flooding does not affect those packets within an IGMP membership group
at all; those packets are still forwarded out. If IGMP snooping is disabled, multicast packets are not
flooded.
Issue the following command to enable egress flooding on the BlackDiamond 10K switch:
enable flooding all_cast port [<port_list> | all]
To disable egress flooding on the BlackDiamond 10K switch, issue this command:
disable flooding all_cast port [<port_list> | all]